CVE-2006-3744

MEDIUM 5.1CVE-2006-3744 · Published 25/08/2006 · updated 16/06/2026

In short

CVE-2006-3744 is a MEDIUM (CVSS 5.1) vulnerability affecting imagemagick (imagemagick).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
imagemagick imagemagick	`= 6.2= 6.2.0.4= 6.2.0.7= 6.2.0.8= 6.2.1= 6.2.1.7= 6.2.2= 6.2.2.5= 6.2.3= 6.2.3.6= 6.2.4= 6.2.4.5= 6.2.5= 6.2.6= 6.2.7≤ 6.2.8`	No fix yet

Description

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.

References

patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
bugs.gentoo.org/show_bug.cgi · Patch
secunia.com/advisories/21615 · Patch
secunia.com/advisories/21621 · Vendor Advisory
secunia.com/advisories/21671 · Vendor Advisory
secunia.com/advisories/21679 · Vendor Advisory
secunia.com/advisories/21719 · Vendor Advisory
secunia.com/advisories/21780 · Vendor Advisory
secunia.com/advisories/21832 · Vendor Advisory
secunia.com/advisories/22036 · Vendor Advisory
secunia.com/advisories/22096 · Vendor Advisory
security.gentoo.org/glsa/glsa-200609-14.xml
securitytracker.com/id
debian.org/security/2006/dsa-1168
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_50_imagemagick.html
osvdb.org/28204
redhat.com/support/errata/RHSA-2006-0633.html · Patch
securityfocus.com/bid/19699
ubuntu.com/usn/usn-340-1
vupen.com/english/advisories/2006/3375 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/28574
issues.rpath.com/browse/RPL-605
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11486

More vulnerabilities in imagemagick

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free